UpHeron
All vulnerabilities

Servers and applications

CVE-2012-5612

Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM,…

Severity
Medium 6.5
Published
3 Dec 2012
Last changed
16 Jun 2026
Added to UpHeron
17 Oct 2026
Fixed in
5.1.67, 5.2.14, 5.3.12, 5.5.29
Exploit chance
21% in the next 30 daysHigher than 97% of CVEs. EPSS by FIRST, 12 Nov 2026
Weakness
Out-of-bounds write (CWE-787)
Attack
Over the network · Needs a login
Attacker can
Read some data · Change some data · Slow it down
CVSS vector
AV:N/AC:L/Au:S/C:P/I:P/A:P
Sources
NVD

Description

Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.

From NVD.

Affected software

SoftwareAffected versions
MariaDBServers and applications · cpe:a:mariadb:mariadb
  • From 5.1.0 before 5.1.67
  • From 5.2.0 before 5.2.14
  • From 5.3.0 before 5.3.12
  • From 5.5.0 before 5.5.29
  • Version 10.0.0
MySQLServers and applications · cpe:a:oracle:mysql
  • From 5.5.0 up to 5.5.28

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2012-5612
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2012-5612